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Abstract 

^ ■ Despite the apparent similarity between shared randomness and shared entanglement in the 

context of Communication Complexity, our understanding of the latter is not as good as of the 
former. In particular, there is no known "entanglement analogue" for the famous theorem by 
^vi I Newman, saying that the number of shared random bits required for solving any communication 

problem can be at most logarithmic in the input length (i.e., using more than O(logn) shared 
OA I random bits would not reduce the complexity of an optimal solution). 

^ . In this paper we prove that the same is not true for entanglement. We establish a wide 

range of tight (up to a polylogarithmic factor) entanglement vs. communication tradeoffs for 

f^ . relational problems. The low end is: for any t > 2, reducing shared entanglement from log^n 

^^ ' to o(log*~'^n) qubits can increase the communication required for solving a problem almost 

^^ . exponentially, from 0{log*n) to fl{y/n). The high end is: for any e > 0, reducing shared 

^y ' entanglement from r7,^~'^logn to 0(77,^"'^/ log ri) can increase the required conununication from 

0{ii^~^ logn) to il{n^~^''^ / \ogn). The upper bounds are demonstrated via protocols which 

are exact and work in the simultaneous message passing model, while the lower bounds hold 

r-M. for bounded-error protocols, even in the more powerful model of 1-way communication. Our 

protocols use shared EPR pairs while the lower bounds apply to any sort of prior entanglement. 

We base the lower bounds on a strong direct product theorem for communication complexity 

r^ ' of a certain class of relational problems. We believe that the theorem might have applications 

O^. outside the scope of this work. 
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1 Introduction 

Suppose that Alice, Bob and Charlie play the following game: Alice receives an n-bit binary string 
X, Bob receives a string y of the same length, they both send some information to Charlie, who 
then tries to guess (based on the received messages) whether x = y or not. The goal is for Alice 
and Bob to send as short messages as possible, such that Charlie would still be able to answer 
correctly with probability at least 3/4. Assume that before the game starts Alice and Bob choose 
two random binary strings ri and r2, of length 2'^ each. Then they treat their n-bit inputs as 
indices in the range [1..2"'] and send to Charlie the bits which are on the positions x and y of r\ 
and r2 (i.e., Alice and Bob send 2 bits each). Eventually, Charlie decides that x = y ii the pairs of 
bits received from Alice and Bob are the same, otherwise he declares that x ^ y. It is clear that if 
Charlie guesses that x = y then he is correct with probability 3/4 and if he says that x ^ y then 
he is certainly right. So, we see that the problem can be solved by communicating only 4 bits (for 
any input length n). On the other hand, Newman and Szegedy |NS96j have shown that if Alice 
and Bob do not share random bits then they must communicate at least Q (y/n) bits in order to 
win the game with any constant probability greater than 1/2. 

We can let our players use the laws of quantum mechanics in order to further increase their 
strength. Specifically, they can share entanglement.^ In this case they are allowed to apply any 
quantum-mechanical operation to their subspaces of the common Hilbert space. In particular, they 
can perform measurements and their behavior may depend on the outcomes of the measurements. 

If the players share a sequence of random bits (chosen uniformly and independently) we say 
that they are using shared or public randomness (also called a public coin). If the players share a 
quantum state we say that they are using shared entanglement (note that it would be useless to 
share a state which is not entangled w.r.t. the players' local subspaces). It is easy to see that in the 
model of shared entanglement the players are at least as strong as they are in the model of shared 
randomness {k independent shared EPR pairs can be measured locally in order to get k perfect 
random bits). 

In this paper we will deal with a longstanding open question regarding the power of quantum 
entanglement in communication. 

1.1 Shared randomness and shared entanglement 

Let us generalize our framework, suppose that Alice and Bob have to fulfill some computation- 
flavored distributed task. As before, the players are located far from one another, so that com- 
munication between them is expensive or even impossible. The players are all powerful from the 
computational aspect. 

Two well know instances of this framework are 2-prover proof systems and various models of 
2-party communication complexity. 

In the first case Alice and Bob are provers, they can communicate with a verifier but not with 
one another. The verifier is computationally limited. The goal of the provers is to convince the 
verifier that some string x belongs to a language L, when checking validity of that statement is 
beyond the verifier's computationally ability. If the verifier believes, based on its communication 
with the provers, that x € L then we say that x is accepted, otherwise it is rejected. A language L has 
a valid 2-prover proof system if Alice and Bob can make the verifier accept (with high probability) 
any x £ L, but making it to accept some y ^ L would be (almost) impossible. 

^Note that even if Alice and Bob share a quantum state the communication channels are still assumed to be 
classical. For simplicity in this paper we do not deal with quantum communication, even though it seems that some 
of our results generalize to that case. 



In the models of 2-party communication complexity Alice and Bob receive one piece of input 
each, respectively denoted by x and y. In the strongest considered model communication between 
Alice and Bob is possible but expensive, it goes in many rounds (first Alice sends a message to Bob, 
then Bob replies, then Alice sends another message and so on). Their goal is to compute (with 
high probability) some function f{x,y) using the smallest possible amount of communication. 

One possible restriction of the model is 1-way communication: Alice is permitted to send 
a message to Bob, after that he has to produce an output (based on y and the message from 
Alice). Note that unlike the unrestricted case, the 1-way model is not symmetric w.r.t. x and y. 
Sometimes even more restricted (symmetric) case is considered which has been described in the 
beginning: there is another participant called a referee, Alice and Bob can send one message each 
to the referee and it has to produce an output based on those two messages. This model is called 
simultaneous message passing (SMP), it is arguably the weakest setting of 2-party communication 
complexity that is still interesting. 

A communication protocol is a description of the behavior of all the participants. The commu- 
nication cost of a protocol is the maximum possible total length of the messages sent according 
to the protocol till the output is produced. The optimization problem is to find a least expensive 
protocol which enables the players to solve their task; the communication cost of a communication 
task is the cost of an optimal protocol. 

Sometimes the communication task is defined not as a function but rather as a relational 
problem. In that case for a pair (x, y) in the input there can be defined any number of good 
answers (no good answer means that the pair can never be given as input). In this paper we allow 
this more general form of communication problems. 

In all these models (both 2-prover proof systems and 2-party communication complexity set- 
tings) we understand relatively well what the power of shared randomness is. In the case of proof 
systems two classical all-powerful provers can prove to a polynomially-bounded verifier^ member- 
ship in L if and only if L £ NEXP ( |BFL90j , |R95j ) . It is also known that shared randomness does 
not affect the power of a system ( |(tS86j ). 

In the case of 2-party communication complexity the situation is slightly more complicated. 
It has been demonstrated by Newman |N91j that we can assume without loss of generality that 
the number of shared random bits used by a protocol is at most logarithmic in the input length. 
Therefore, availability of shared randomness cannot reduce significantly the complexity in the 
models where Alice sends at least one message to Bob (she can append the required number of 
randomly chosen bits to her message, that would increase the cost of a protocol only by an additive 
logarithmic term). In the case of SMP the presence of shared randomness can make a difference. 
For instance, as mentioned in the beginning, the equality problem can be solved by a protocol 
of constant cost when shared randomness is available, whereas without shared randomness the 
complexity becomes il (\/ra) 0NS96J ). 

We know much less about the role of shared entanglement in the context of these models. We 
do not know what the power of 2-prover proof systems is when the provers share entanglement.^ 
Moreover, Cleve, Il0yer, Toner and Watrous |(]HTWn4] have shown that the known protocol which 
accepts NEXP in the standard 2-prover system cannot achieve the same goal in the presence of 
shared entanglement, unless EXP = NEXP. For the restricted case when the provers share only 
polynomial (in n) number of qubits, it has been demonstrated by Kobayashi and Matsumoto |KM03j 
that only languages from NEXP can be accepted (but again, maybe not all of them). 

■^In particular, that means that the communication cost of a proof can be at most polynomial in the input length. 

■^As far as we know today, such systems can be more powerful, less powerful, or even incomparable to the standard 
2-prover systems, since adding power to provers can, in general, help them to establish a true argument as well as to 
cheat. 



In the area of communication complexity very recently a communication task has been found 
( |GKRW06j ) which can be solved exponentially more efficiently in the SMP model with shared 
entanglement than in the SMP model with shared randomness (in fact, the problem is equally hard 
even for 1-way communication with shared randomness). But it is not known whether any upper 
bound can be put on the number of qubits in a potentially helpful shared quantum state. 

There is a result by Shi |S05j which says (informally) that adding large amounts of prior entan- 
glement can reduce the communication no more than exponentially. However, Jain, Radhakrishnan 
and Sen |JRS05j have shown that Newman's "blackbox-type" proof, which keeps the protocol the 
same and just reduces the set of random strings to O (n) elements (which in turn can be represented 
by O (logn) random bits), cannot be used in order to reduce the amount of entanglement used. 

Besides, it is not clear whether EPR pairs can be considered as a universal source of entangle- 
ment in the contexts of 2-prover proof systems and 2-party communication complexity. 

1.2 Our results 

As our main result, we claim that no reasonably sublinear upper bound holds for the number of 
potentially useful shared entangled qubits. Put in contrast to the Newman's theorem, this is a new 
example of qualitative difference between the two resources (public coin vs. shared entanglement). 
Note that our conclusion and that of [(tKEWOH] are logically related, our result can be viewed as 
a generalization of the models separation in IGKRWOG] ."^ 
Formally, our main result is the following. 

Theorem 1. For any monotone increasing function k{-) : N ^ N there exists a family of relational 
communication problems such that the problem with input length n = m- k{m) can be solved exactly 
in the SMP model with k(m) log(7n) shared EPR pairs by a protocol of cost O {k{m) \og{m)). The 
same problem requires il ( ]^ \J^ I communication for its solution with constant-bounded error in 

the model of 1-way communication with any shared entangled state of o ( j^—^^ ) qubits. 

In particular, for any i > 2 by choosing k{m) = log*^ m we obtain a problem with input length 
n = ?7i-log ~ m which can be solved using (less than) log^'n EPR pairs and O {log^n^ communication 
but requires Q. (\/n) communication with o {log^~'^ri) shared entanglement. Therefore, limiting the 
amount of shared entanglement even to super-logarithmic values can result in almost exponential 
increase in communication cost of a problem. 

Alternatively, for any e > choosing k{m) = m^i^~^ gives a problem with input length 
n = m}''^, solvable with (less than) n^~^logn EPR pairs and O (n^~^logn) communication but 

demanding Q. ( " ^ 1 communication with o ( j^^-^ ) entanglement. Therefore, no reasonably sub- 
linear upper bound on the number of useful shared qubits can be put. 

Note that our protocols use shared EPR pairs whereas the lower bounds hold for any sort of 
entanglement. Because our analysis is tight up to a poly logarithmic factor, it can be concluded 
that for the families of relations we consider it is the case that independent EPR pairs are as good 
as any sort of shared entanglement can be (up to a polylogarithmic factor). Our protocols are exact 
and work in the SMP model, while the lower bounds hold for bounded-error protocols, even in the 
model of 1-way communication. 

^Assume towards contradiction that shared entanglement is no more powerful than public randomness (this is a 
contrapositive to IGKRW061 ). Then any number of shared qubits can be replaced by similar number of public random 
bits, which can be reduced to logarithmic number (due to Newman) and then simulated by the same number of shared 
EPR pairs. So, logarithmic number of shared EPR pairs would always be sufficient, which is a contrapositive to our 
main statement. 



Our proof consists of two parts. First, we establish a strong direct product theorem for a 
class of relational problems in the model of 1-way communication.^ In particular, the theorem 
is applicable to the relation HMP defined by Bar-Yossef, Jayram and Kerenidis |BJK04j . We 
think that the theorem might be of independent interest. For instance, the fact that it gives a 
strong direct product result for the one-way complexity of HMP looks very promising, because this 
relation, and its modifications, is the only known type of communication problem that demonstrates 
super polynomial separation between quantum and classical 1-way models. Problems based on HMP 
have been used recently to establish a number of exponential separations between various quantum 
and classical communication models (cf . |B.TK04j , [(tKEWOB] ) . It might be the case that our strong 
direct product result can be used to obtain more results based on HMP. 

The second part is a construction of an entanglement-expensive communication task. We first 
apply our direct product theorem in order to reduce to exponentially low the maximum success 
probability of a protocol which is not using entanglement. Then we view a hypothetical protocol 
which is successful when it uses a shared entangled state p as a distinguisher between p and the 
maximally mixed state of the same dimension. If the protocol starts with the maximally mixed 
shared state then the players are not entangled, so the upper bound on success probability without 
entanglement must hold. By the laws of quantum mechanics, any distinguisher between p and the 
maximally mixed state must be wrong with probability not less than approximately the inverse 
of the dimension of the state. So, our assumption that a protocol starting with p is successful 
leads to a lower bound on the dimension of p (in our case the obtained bounds are tight up to a 
polylogarithmic factor in terms of the number of qubits in p) . Note that the resulting entanglement 
lower bound itself has the form of a direct product result (i.e., in order to solve more copies of 
the original problem one must accordingly increase the number of shared entangled qubits to start 
with). 

It can be seen that the described technique is quite general; probably it can be used in other 
situations where the "entanglement complexity" of a problem is considered (including all the models 
we have mentioned). For instance, given a corresponding direct product result for the complexity 
of a solution without entanglement, the technique can be applied to virtually any communication 
complexity model. 

We note that the technique of replacing a quantum state under consideration by the maximally 
mixed state and upper-bounding the damage caused by such substitution has been used before 
in several contexts related to communication complexity (cf. |KS W04j . |A04j ) . It seems that the 
technique is quite powerful and might be applicable in various settings involving quantum mechanics 
and information processing. 

We also apply our entanglement bounding idea in the context of 2-prover proof systems. We 
give a partial converse to the result of jKMO.Sj . We characterize the power of 2-prover proof systems, 
where the provers are allowed to share entanglement but the number of qubits is bounded by a 
polynomial fixed a priori (i.e., the bound should be a global parameter of the model). ^ The power 
of such proof systems equals NEXP, i.e., in this case the factor of entanglement does not affect the 
power of a system. 



^We call a direct product result strong if the amount of available resources scales up as the number of instances 



jrows. 
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^Note that the model considered by IKM03| gives the provers more freedom than we do. Their provers can use the 
amount of entanglement which is bounded per protocol, while ours are bounded per model. It is still open whether 
the proof system of jKMO.S) can accept any language in NEXP. 



2 Preliminaries 

In this paper we will deal with relational communication problems. Formally, a problem will 
be represented asP C X x Y x Z, where X = Y = {0,1}* are the sets of inputs to Alice 
and Bob, correspondingly, and Z is the set of possible answers. An answer z £ Z is good for 
input {x,y) & X X Y if {x, y, z) G P; if no such z exists then the combination (x, y) is forbidden 
(i.e., it is never given as input). We will write X„ to denote X f] {0, 1}" as well as Yn and 
Zn to denote {y £ Y \ 3x £ X„, z £ Z : {x,y, z) € P} and {z £ Z\ 3x £ Xn,y £ Y : {x,y, z) £ P}, 
correspondingly. 

Let P (1 X X Y X Z he a relational problem. When P is clear from the context, for any A C X, 
y £ Y and z £ Z we will denote by A^y^^ the set {x € A | {x,y, z) £ P}. 

We write P^ C X^ x Y'' x Z^ to address the direct product of k instances of P, formally: 

P'' = {{{xi,..,Xk),{yi,.;yk),{^i^-^Zk)) I Vi £ {l,..,k} : {xi,yi,Zi) £ P} , 

in that case we will address P as a single instance of a problem. For any A C X , i < k, ai, ..,ai £ Y 
and bi, ..,bi £ Z we define: 

A\ai,..,aiM,-,bi =^ {x£ A\yi<j <i: {xj,aj,bj) £ P} , 

and for a £Y and b £ Z: 

A\y^^a,zi=b = {x £ A\ {xi, a, b) £ P} . 

Note that in our definitions of /c-ary direct products we have changed the natural ordering and 
grouping of elements, making them more suitable for our context of communication tasks. 

For convenience we assume that 1-way protocols do not use shared randomness (private ran- 
dom bits will be allowed, of course). As explained earlier, this does not cause any loss of generality 
because that assumption can, in the worst case, result in adding a logarithmic factor to the com- 
munication cost. 

For any discrete set A we denote by Ua the uniform distribution over A. For a discrete random 
variable x we denote by H [x] its Shannon entropy. Sometimes we write Hd [x] for a distribution 
D to emphasize that x ^ D, the same value will be denoted by H [D] when x is insignificant for 
the context. 

We write log to denote the logarithmic function with base 2. 

3 A strong direct product theorem for relations 

We establish a strong direct product theorem for a class of relational problems in the model of 
1-way communication without shared entanglement. 

Lemma 2. Let P(lXxYxZbea relation. Let a{m) : N ^ M and 8{m) : N ^ [0, 1] be two 
functions, such that logm < a{m) < m, log f jr^ I > 4-|-6 °^^' ^^' and for any distribution D over 
Xm with Hd [x] > m — (T[m) it holds that 



Pr 

{y,z)r^UYxz 



¥v[{x,y,z)£P]>\ 



< ^{fn) 



J ka(m) 

Then for m > 64 and k > logm, for any set B C {X^) of size at least 2 *" i°g '« the following 



holds: 

V 7 11 fc 

Pr 

y^Uyk L 



3z£ Z'' : \B\y^,\ > (2/3)i5f^ \B\ 



< 2-^. 



Proof of Lemma\^ Fix a set B satisfying the lemma condition. Define: 

def/l if |5|^,,| >(2/3)T^|B| 



£{y,z) 



otherwise 



and we will use the same notation for the corresponding logical predicate (i.e., £{y, z) is satisfied if 
and only if £{y, z) = 1). It holds that 



Pr 



3zeZ'' ■.£{y,z) 



< E 



z&Zk 



£{y,z) 



\Z'\- Pr [8{y,z)] 

{y,z)r^Uyk^zk 



We will upper-bound the expression on the right-hand side. Before we proceed, let us introduce 
some notation. We will address individual coordinates of elements of X'^ , Y^ and Z^ through 
(xi, .., Xfc) for an X € X , and similarly for y G Y and z ^ Z . 

Let us think of choosing {y,z) ~ Uyks^zk as a sequential fc-step process of choosing pairs 
{yiiZi) ~ l^YxZ, not necessarily in the ascending order of i -s. We will specify the order later, so 
far we denote it by ji, .., jfc, i.e., at the first step we choose (y^^, ZjJ, and so on. 

Let Oj^ , . . , Oj^. and bj-^ , . . , bj^ be the choices made for the random variables yj^ , . . , y^,.. and Zj^ , . . , Zj^. , 



def 



def 



correspondingly. Define: Bq = B and for 1 < i < k: Bi = -Bj_i 



\yji=H 



Consider the sequence |i?o| , ••, \Bk\ - it is monotone non-increasing, and £{y,z) exactly means 
that \Bk\ > (2/3)''/^°g"'|5|. Let us say that step i is good if \Bi\/\Bi^i\ > 2/3. Observe that 
£{y,z) occurs only if at least k — j^—^ steps were good. Assuming integer-valued rounding where 
necessary, we get 



Pr[£{y,z)]<Pr 



at least k 



k 



logm 



steps were good 



< 



logm 



max 



Pr 



«lv,V 



the steps ii, ..,i. 



were good 



}. 



log m 



where the maximum is taken over all (k — j^^— ^)-tuples of pairwise distinct indices from [k]. For 
the reasons which will become clear later, we do not want to take into consideration the last -, 

' logm 

steps, so we let those steps be good "for free" and get 

k 



Pr[£{y,z)]< 



k 



logm 



max 

«1. ••,«!. 3fc 



Pr 



the steps ii, . . , i, 3k were good 



log m 



< 



max 

log m 



,ie[fc 2fe 



{\ log m 

Pr [the i 'th step was good] > , 

where the first maximum is taken over all (k — , )-tuples of pairwise distinct indices from 

^ log m' ^ ^ 

[k — -, ] . We can make our bound tighter using the fact that the event £{y,z) implies that 



logm J 



aU Bi -s are of size at least (2/3)''/i°s'^ 1^1 > 2 
Pr[£{y,z)]< 



log m 



max 

2fc 

log 7?l ^ 



ie[fc 2fe 



Pr 



the i 'th step was good! |-Bi-i| > 2 



km- 



ka(m) 
log in 



Denote: 



def 

Pmax — max 

i- loe: m 



Pr 



the i 'th step was good! \Bi 



,^ _ 2 logm 



We have seen that 



Pr 



3zG Z'^ -.Siy^z) 



<\Zr, 



T-Vr, 



(1) 



For obtaining the desired bound we will, on each step, try to choose a coordinate which has low 
chances to give rise to a good step. Such a coordinate for the i 'th step will be chosen adaptively 
among all those not fixed in the first i — \ steps. 

Assume that we are at step zq now, let us see that such a bad coordinate must exists as long 



as l-Bjo-il > 2 log"" 
we know that Hn 



and io < k 



2k 



\x] > km 



J— — ^. Let -Djo-i be the uniform distribution over i?jp-i, 
-^^smi _ ^^ Por j G [k] define Cj to be the entropy of Xj when 



loerra 



def 



X ~ Dig^i and let J = {ej > m — a{m) \ j £ [k]} ■ Because Vj G [A:] : Cj < m, hy the pigeonhole 
principle and entropy subadditivity it must hold that 



J\m + (k ~ \J\)(m — a{m)) > km 



ka{m) 
logm 



k-\J\< 
\J\ >k- 



logTTl 

2k 
logm 



+ 



< 



a{m,) logm 



Choose arbitrary jo G J, such that yj^ and Zjq have not been set yet (it exists because we are only 



at step io 1^ k — -^ 
Observe that 



2k 



)• 



Pr 

{a,b)r^UYxZ 



B, 



*0"^I?/J0="'- 



'30" 



>H|B 

- 3 



j()-ll 



< 



5{m,) 

I 7 I 



by the theorem assumption about P applied to the jo 'th coordinate of P^. So we choose Jq as 
the coordinate to be handled at step io. Because Bi = Bi^i^ ^^^, ^j, where (a, 6) ^ I^yxZ, we 
conclude that the probability of i 'th step to be good is at most 5{m)/ \Zm\ ■ 

Recall that our goal is to upper-bound the value of Pmax ■ We have chosen io to be any integer 
not exceeding k— y^ ^ , so an upper bound on Pr [the io 'th step was good] under our assumptions 
is also an upper bound on Pmax- Therefore, (P) leads to the required 



Pr 

y^Uyk 



3z£ Z^ ■.£{y,z) 



<\z„ 



ife ofe 



6{7n) 

I 7 I 



3fc 
log m 



< \Zm\'°Srn .2" 



{5{m)) '"f^" < 2" 



where the last inequality follows from the theorem assumptions regarding 6{-) and m. 
The following theorem is straightforward from Lemma [2 



' LemmaT^ 



Theorem 3. Let PCXxYxZbea relation satisfying the condition of Leninia\^ 

Then for m large enough and k > logm, any 1-way communication protocol of complexity at 



most 



ka{rn) 
logm 



2 solves P with success probability at most (2/3) i°s' 



Proof of Theorem\^ Assume towards contradiction that there exists a protocol A of complexity at 



most 



ka{m) 



j^ ^ — 2 which solves P with success probability more than (2/3) 'og™ . Then there exists 
a deterministic protocol A' which does the same when the input distribution is Ux^^y''- 

Assume that x ~ Uxk and y ~ Uyk. For any message ever sent by Alice according to A' , define 
its weight as the probability of the message to be produced and its success as the probability that 
A' is successful, conditioned on the message having been produced. By the pigeonhole principle, 
with probability at least 3/4 Alice sends a message of weight at least 1/4 divided by the number 
of possible messages. Similarly, with probability at least 1/3 Alice sends a message of success at 
least 2/3 times the success probability of the protocol. In other words, there exists some message 
a such that 

B = <x £ X I given x, Alice sends a according to A' > 

ka(m) 

satisfies \B\ > 2T°g™~, and conditioned on Alice sending a. Bob is able to produce a correct answer 
with probability more than (2/3) '°s™ 

Let z{y) be defined as the answer produced by Bob according to A' , if his own input is y and 
the message received from Alice is a. Then, according to the previous discussion, it must hold that 



Pr 



(x,y,z(y))GP^-l > (2/3)1^-^ 



which leads to 



In other words, 



Pr 



Pr 

x^Ub 



ix,y,z{y))eP'' > (2/3)1^ 



> (2/3) i°g'". 



Pr 

y^Uyk 



%,(^)|>(2/3)>o.™|i?| > (2/3) log™, 



which contradicts Lemma HI 
Our theorem follows. 



I Theorem\^ 



4 A communication task with an entanglement-expensive solution 



Let TTi be a power of 2. The following relational problem has been first studied by Bar-Yossef, 
Jayram and Kerenidis |B JK04J . 

Definition 1. Let X = {0, 1}'", and let Mm he the family of all perfect matchings on m nodes, 
represented as m/2-tuples of pairs of vertices connected by an edge. Then 

HMPm = {{x,y,{a,Xi®Xj)) \ x £ X,y £ Mm,ya = {i,j}} ■ 

In words, Alice receives a binary coloring of m nodes and Bob receives a perfect matching on 
m nodes; the goal is to say whether a pair of nodes connected by the matchings are colored the 
same or not. 

Let k be an integer greater than 1. We define HMPm as a direct product of k instances of 
HMP^,. 



(k) 



Definition 2. HMP 

holds that {xi,yi,Zi) G HMPm- 



{{{xi, . . . , Xk), {yi, . . . ,yk), {zi, . . . , Zk))] , where for alii £ {l,...,k} it 



,(fc) 



We will consider the communication complexity of certain sub-families of HMPm in order to 
establish our entanglement vs. communication tradeoffs. 



4.1 Complexity of HMPm 

It is known that HMPm can be solved exactly using log(m) EPR pairs and 0(log(m)) bits of 
communication in the SMP model. The protocol is a modification of a construction suggested by 
Buhrman ^ (a similar protocol is used in |GKRW06] ^. For completeness we describe the protocol 
here. 

The starting state of Alice and Bob is 



- y 



je{0,i}'°s™ 

First, Alice applies phases according to her input x: 

1 v^ 



m 






1) 



J6{0,1} 



log rn 



and Bob measures with the ?n,/2 projectors -Ejj = |z)(z| + |j)(i| induced by the pairs {?, j} € y. 
After that both players apply a Hadamard transform to each of the log n qubits of their part of the 
shared state, which then becomes (ignoring normalization) 






where {i, j} is the outcome of the Bob's measurement, ® denotes the bit-wise xor operation and • 
stands for the inner product mod 2 of two vectors. It follows that |A:) |/) has non-zero amplitude if 
and only if 

{k®l)- (i® j) = Xi®Xy 

The players measure the state \k) \l) in the computational basis, then Alice sends k and Bob sends 
a, i, j and / to the referee, where ya = {^, j}- The referee outputs (o, (k ®V) • [i ® j)), and the 
protocol is always correct. 

Concerning the lower bound, it has been demonstrated in |BJK04j that HMPm is hard for 
1-way communication without entanglement. However, we need a stronger statement, in order to 
be able to apply Theorem |21 



Claim 4. Let a{m) = ^I^g and 6 = ^tuj then for any distribution D over X^ with Hd [x] > 



576 
m — a{m) it holds that 



Pr 



Pr [{x,y,z)e HMPm] > I 



s 

< — . 

m 



Proof of Claim^ Assume towards contradiction that that exists some distribution Dq which fal- 
sifies the claim. 

Corresponding to the statement of the claim is the process of choosing y ~ UMm ^^'^ ^ = (^j b), 
where a ~ Z//[m/2] ^^^ ^ ~ ^{0,1} ■ The choice is followed by asking what Pr [{x,y,z) £ HMPm] is 
w.r.t. x ^ D. This is equivalent to uniformly choosing two endpoints i ^ j £ [m] and b € {0, 1}, 
followed by asking what the probability is that Xi ® Xj = b w.r.t. x ~ D. Our assumption can be 
rephrased as 

r 2 

Pr [xi ®Xj = b]> - 

x^Dq o 



Pr 



> -. (2) 

m 



Define: 



C=U^,j} 



ij^je H; 3& G {0, 1} : Pr [xi © Xj = b] > 2/3 

x~Do 



Since it cannot hold for any i ^ j that both Xj (B Xj = and Xj © Xj = 1 occur with probability at 
least 2/3, it follows from @ that |C| > ^(m^ - m) = (5(m - 1). 

Now consider the graph consisting of the edges from C. This graph must contain at least ^/2 \C\ 
non- isolated vertices, since v vertices give only (v"^ — v)/2 < v'^/2 distinct edges. Let C" C C be a 
forest consisting of a spanning tree for each connected component of this graph. It must hold that 

\C'\ > ^J\C\n > v'("i-l)V2. 

Note that the set of uniformly distributed binary random variables {xj © Xj \ {i,j} £ C'} is 
perfectly independent when x ~ VlfQiym. Therefore by entropy subadditivity the entropy loss in 
Dq is at least 

^ (1- H [x.©x,]) > \C'\ • (1 - H[/?(2/3)]) > ^^"^ ~ ^^\ 
where /3(2/3) denotes the Bernoulli distribution with success probability 2/3. Therefore, 



r 1 \/{fn - 1)5 , . 

H |a^| < m = m — crim), 

Do 18 

which is a contradiction. 

The claim follows. ^ciaim]^ 

4.2 Analyzing HMP^^'^ 

Using k parallel copies of the protocol described in Section 14.11 we obtain a protocol for exact 

(k) 

solution of HMPm . The complexity of the new protocol is O {klog{m)) and it uses /clog(m) EPR 
pairs. 

Now we apply Theorem |21 together with Claim |2 (note that \Zm\ = m in the case of HMPm)- 
It follows that 

Claim 5. Any 1-way protocol of communication cost o ( , ^"^ I correctly solves HMPm with prob- 



logm 



ability 1/2 viog™. 



(k) 

4.2.1 Solving HMPm with limited entanglement 

In this section we will abuse notation by not distinguishing between a quantum state and the 
corresponding density matrix. 

The idea of our next argument is the following. Let C be a 1-way protocol of cost o ( j^^ ) 
which start with some entangled state p of e(m, k) qubits shared between Alice and Bob and solves 

(k) 

HMPm with probability at least 6. Denote by r the maximally mixed quantum state over e{m, k) 
qubits. Consider a modification of the protocol C where instead of p we use r, let us call this new 
protocol C. 

On the one hand, by the laws of quantum mechanics the success probability of C must be at 
least (5/2^(™''^). On the other hand, because the maximally mixed state over e{m, k) qubits is not 
entangled. Claim [3 applies to C". From that we will derive an upper bound on 5. 
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Let C be the measurement-free version of C (i.e., the communication channels are quantum and 
the output is a quantum state); similarly, let C be the measurement-free version of C . Denote 
by Ux,y the unitary operator corresponding to the action of C on the shared entangled state when 
the inputs to Alice and Bob are x and y, correspondingly. In other words if the input pair is 
{x,y) then Ux^ypUl^y and Ux^yTUl^y are the quantum states obtained after running of C and C", 
correspondingly. 

Because r is the maximally mixed state of dimension 2'^^^'^> therefore t' = „e^(m.fc)„i ( ''" ~ 2e('",fc) ) 
is a quantum state too. We can express: 

'2e{m,k) 1 1 

Let us denote by ^x,y the projection of the final state of C to the subspace of correct answers 
to HMPm {x,y). Our assumption about C can be expressed as 

Vx, y tT:{Ux,yUx,ypUly) > 6. 

The success probability of C" is 

1 A 

tT{Ux,yUx,yTUly) > —7-TS ■ ^"^{^x^yUx.ypUly) > 



•,y' - 2e(m,fc) "''■V-^-"^-y^a:,j/A'^a;,j/; - 2e(m,fc) ' 

As mentioned above, Claim^applies to C and therefore for m sufficiently large, (^ ^j G 2 \i°sm} _ 
Therefore, the protocol C can be successful with constant probability only if e(m, k) £ Q (k) . This 

(k) 

concludes our complexity analysis for HMPm . 

(k) 

Claim 6. In the SMP model, HMPm can he solved exactly by a protocol of cost O (A;log(m)) using 
klog{m) shared EPR pairs. 

In the l-way communication model with any shared entangled state of o ( ^^ 1 qubits, the 
communication cost of solving HMPm with constant-bounded error is Q. ' 



logm 

Theorem n follows from this claim. 

5 Connection to 2-prover proof systems 

Consider the following argument. Starting with the known 2-prover classical proof system which 
accepts NEXP, let us improve its soundness by sequentially repeating the protocol polynomially- 
many times. We know that the same proof system is not valid if the provers share entanglement 
because they can cheat ( |('HTWfl4j ). However, a straightforward modification of our entanglement 
bounding approach shows that in order to cheat, the provers require the number of entangled qubits 
asymptotically close to the number of repetitions. 

Therefore, if the number of shared entangled qubits is bounded by some a priori fixed polynomial 
in the input length, we can introduce enough repetitions to make any cheating impossible (cf. 
Subsection 14.2. l() . In combination with the result of |KM03j . this leads to the following conclusion. 

Claim 7. Let MIP*,-. be the model of 2-prover proof systems in which the provers are allowed 
to share any entangled state over e(n) qubits, where n is the input length. If e(n) G poly{n) then 
MIP*,. can accept a language L if and only if L £ NEXP. 

In other words, the power of MIP*,. is the same as that of the classical 2-prover proof systems, 
which is equivalent to NEXP. 
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6 Discussion 

In this paper we solve one of the open question regarding the power of quantum entanglement in 
communication complexity: we show that no general sublinear upper bound on the required amount 
of shared entanglement can be put in the models of classical communication with either 1-way or 
simultaneous message passing. Can similar results be obtained for other communication models? 

In Section[21we showed a simple modification of our entanglement bounding ideas which leads to 
some nontrivial statement regarding the power of 2-prover proof systems with shared entanglement. 
Can we find other applications of our technique outside the domain of communication complexity? 
Possible applications to other communication complexity models might be interesting too. Given 
that the power of entanglement is one of the most important longstanding open problems in the 
area, it is very tempting to look for other applications of our technique. 

There are some more technical questions. Can we find more uses for our strong direct product 
theorem for relations? It would be interesting to find applications other than HMP, though even 
with that relation it might probably lead to more results in communication complexity. The 
importance of HMP stems from the fact that this is the only problem we know today which 
demonstrates superpolynomial (in fact, exponential) separation between quantum and classical 
1-way communication models. 

It would be also interesting to see whether results similar to ours can be demonstrated through 
functional problems, either total or partial (the latter means that some combinations of (x, y) can 
never appear in the input). 

The last question we would like to mention is whether independent EPR pairs provide a universal 
source of entanglement in the contexts of 2-party communication complexity and 2-prover proof 
systems. 
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